From f048e2e66544cbfae4cb61561d060e2d94c679b7 Mon Sep 17 00:00:00 2001
From: Marc Beninca <marc-beninca@rwx.work>
Date: Mon, 10 Jul 2023 15:33:10 +0000
Subject: [PATCH] kube/secrets

---
 rtfd/public/kubernetes/index.rst | 92 +++++++++++++++++++++++++++++++-
 1 file changed, 90 insertions(+), 2 deletions(-)

diff --git a/rtfd/public/kubernetes/index.rst b/rtfd/public/kubernetes/index.rst
index 9c166e9..da737a3 100644
--- a/rtfd/public/kubernetes/index.rst
+++ b/rtfd/public/kubernetes/index.rst
@@ -411,8 +411,8 @@ Pod YAML configurations
    - name: my-container
      image: my-image
      volumeMounts:
-     - name: my-volumemounts
-       mountPath: /etc/my-volumemounts.txt
+     - name: my-volume
+       mountPath: /var/lib/my-volume
    volumes:
    - name: my-volume
      configMap:
@@ -448,3 +448,91 @@ Pod YAML configurations
      envFrom:
      - configMapRef:
        name: my-configmap
+
+Secrets
+=======
+
+* generic
+* docker-registry
+* tls
+
+From:
+
+* environment variables file
+* file
+* key and value
+
+Read
+----
+
+.. code:: shell
+
+ kubectl \
+ get secrets \
+ -n my-namespace
+
+Write
+-----
+
+.. code:: shell
+
+ kubectl \
+ create secret generic my-secret \
+ --from-literal 'username=user' \
+ --from-literal 'password=1234' \
+ -n my-namespace
+
+.. code:: shell
+
+ kubectl \
+ create secret generic my-secret \
+ --from-file 'my-secret.txt' \
+ -n my-namespace
+
+.. code:: shell
+
+ kubectl \
+ create secret generic my-secret \
+ --from-env-file 'my-secret.env' \
+ -n my-namespace
+
+.. code:: shell
+
+ kubectl \
+ delete secret my-secret \
+ -n my-namespace
+
+.. code:: yaml
+
+ apiVersion: v1
+ kind: Pod
+ metadata:
+   name: my-pod
+ spec:
+   containers:
+   - name: my-container
+     image: my-image
+     volumeMounts:
+     - name: my-secret-volume
+       mountPath: /var/lib/my-secret-volume
+   volumes:
+   - name: my-secret-volume
+     secret:
+       secretName: my-secret
+
+.. code:: yaml
+
+ apiVersion: v1
+ kind: Pod
+ metadata:
+   name: my-pod
+ spec:
+   containers:
+   - name: my-container
+     image: my-image
+     env:
+     - name: username
+       valueFrom:
+         secretKeyRef:
+           name: username
+           key: username